Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137302e302f32342d3234203d3e203237383238.roa
File:                     3230302e372e3137302e302f32342d3234203d3e203237383238.roa (raw, json)
Hash identifier:          LG/vFXPgZJk40dUowWy4rYqr3pOdHBCAe8zY9bCAwOo=
Subject key identifier:   B8:33:3A:AF:28:ED:D4:60:AC:5A:C3:BE:52:16:8A:FA:38:14:9B:89
Certificate issuer:       /CN=5D81157E960567670F7461B44557EFEA818501D2
Certificate serial:       5FD3D6E678C931B10E6A58BB1495C527AFE511CA
Authority key identifier: 5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137302e302f32342d3234203d3e203237383238.roa
Signing time:             Fri 27 Mar 2026 18:15:01 +0000
ROA not before:           Fri 27 Mar 2026 18:10:01 +0000
ROA not after:            Fri 26 Mar 2027 18:15:01 +0000
asID:                     27828
IP address blocks:        200.7.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Apr 2026 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d3:d6:e6:78:c9:31:b1:0e:6a:58:bb:14:95:c5:27:af:e5:11:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D81157E960567670F7461B44557EFEA818501D2
        Validity
            Not Before: Mar 27 18:10:01 2026 GMT
            Not After : Mar 26 18:15:01 2027 GMT
        Subject: CN=B8333AAF28EDD460AC5AC3BE52168AFA38149B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:62:2c:2e:9c:bd:55:be:0a:94:50:90:3c:
                    09:ab:43:ee:8b:5f:d8:e7:7e:8b:81:28:ec:00:71:
                    6b:74:9d:48:77:cc:c7:b6:7e:3b:50:dc:eb:5f:fe:
                    a4:eb:24:22:03:2c:4a:0f:fc:7c:e5:2e:4d:57:9a:
                    31:bc:1c:89:8e:00:3e:dc:c1:c2:11:bb:be:4b:7c:
                    9c:23:3e:e7:20:e5:20:ec:ea:7f:99:f5:cc:84:0e:
                    77:f7:ed:c7:c9:9d:fb:78:5c:32:5c:af:a0:30:13:
                    2e:f4:ee:4b:3f:5b:ed:3a:f8:30:83:41:f4:b0:ef:
                    7f:26:94:b5:1d:65:d1:af:0a:8d:40:ff:e6:3d:fd:
                    cc:ac:cc:1c:48:e0:24:16:6f:f3:e1:ab:36:16:7c:
                    db:9f:61:4c:ed:33:4b:aa:1e:a3:08:fa:ec:a2:e2:
                    c3:f1:f1:9a:2f:2a:d6:d5:b4:15:22:7f:a4:87:e6:
                    54:4d:bf:d8:5a:3b:49:7a:36:af:1a:73:92:23:29:
                    ae:80:a3:10:a3:7e:72:af:15:62:ff:eb:8e:d9:c8:
                    04:b2:cd:bc:be:01:94:05:4e:c3:b6:25:c9:d5:61:
                    19:30:93:cc:77:53:46:a8:bf:39:4f:d5:c1:b7:68:
                    1b:c5:c3:51:d1:f8:a6:74:eb:92:00:d9:3c:2e:b4:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:33:3A:AF:28:ED:D4:60:AC:5A:C3:BE:52:16:8A:FA:38:14:9B:89
            X509v3 Authority Key Identifier:
                keyid:5D:81:15:7E:96:05:67:67:0F:74:61:B4:45:57:EF:EA:81:85:01:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/5D81157E960567670F7461B44557EFEA818501D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D81157E960567670F7461B44557EFEA818501D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD3042632164AAC8CB131288D31E4E55FA570F6DF0A9ABECCD37474475AB736A/0/3230302e372e3137302e302f32342d3234203d3e203237383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ad:0b:a5:e9:9e:9b:c0:52:cc:30:cd:ba:5c:f6:ca:6a:73:
         f7:d8:29:81:3e:80:cb:8e:43:11:8f:3b:f1:b8:49:70:e4:76:
         e4:01:38:ba:ac:56:b2:cd:50:71:cb:31:38:bb:b7:4a:9f:a1:
         57:1e:dc:4c:0c:28:cd:17:d5:34:ce:96:ca:92:4e:54:1d:ad:
         51:d6:8c:13:31:78:c7:b1:3c:c7:ff:cb:50:bc:b4:9f:6a:60:
         6e:af:8f:85:8d:38:58:e5:19:38:a9:47:20:03:13:9e:a7:5b:
         f5:2c:91:08:07:bf:50:a3:33:14:4f:cc:bd:6d:35:4e:5f:80:
         b6:ba:d1:75:d4:ac:53:62:f8:7b:e6:94:31:91:df:be:a0:19:
         9b:72:0c:dc:80:c1:d5:22:73:5f:4b:22:2c:51:ac:9f:ca:61:
         20:bd:f6:a0:86:88:64:ed:05:3a:24:30:c1:d0:e3:57:9b:13:
         53:de:5c:d2:d0:42:fd:8b:7f:b0:29:7f:d1:37:fb:59:c5:c0:
         53:52:03:b3:07:12:78:52:49:d9:fa:97:a0:21:3a:96:ff:e5:
         2e:dc:ab:77:e4:ee:fc:66:2a:17:fc:85:52:66:31:46:51:b5:
         ce:58:a2:5e:53:f8:03:40:d2:7c:38:ec:0f:bc:94:cb:dd:fe:
         7c:8a:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:38 2026 by rpki-client